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(57) ABSTRACT 

Terminal devices for a wireless communication network are 
manufactured and distributed with predetermined commu- 
nication capabilities and a minimal operation capability. 
Each unit includes a substantial memory for plug-in feature 
programming, which initially is empty. A terminal user 
selects a desired feature or set of features and contacts a 
service provider. The provider's equipment downloads soft- 
ware programming corresponding to the desired feature into 
the memory of the terminal device. The software takes the 
form of a plug-in module, written to the program interface 
specification of the core software of the terminal device. 
When loaded into memory and interfaced through the core 
software, the module allows the terminal device to imple- 
ment the desired feature. Features can be sold in predefined 
packages or individually. Features can be added, upgraded 
or replaced at any time by downloading new feature mod- 
ules into the memory. 

8 Claims, 4 Drawing Sheets 
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OVER-THE-AIR PROGRAMMING OF Essentially, these downloading techniques turn on or off 

WIRELESS TERMINAL FEATURES available features by setting bits to toggle features on/off or 

by loading necessary control data, such as the list of system 

RELATE APPLICATIONS identifiers used to control system selection by the handset 

This application claims the benefit of U.S. Provisional 5 durin g roaming. The carrier may download new or updated 

Application No. 60/185,131, entitled "OVER-THE-AIR data > for example, a new version of the preferred roaming 

PROGRAMMING OF WIRELESS TERMINAL FEA- ^t, from time to time. 

TURES" filed on Feb. 25, 2000, the disclosure of which is The existing programming and downloading techniques 

entirely incorporated herein by reference. do enable the carrier to modify some operations of the 

10 handset, to turn services on or off and/or to update necessary 

FIELD OF THE INVENTION data> However, the feature functionality desired must 

The concepts involved in the present invention relate to a already be present in the unit as manufactured and sold to the 
new approach to the manufacture, sale and distribution of ^ desires a new feature that an existing unit 

wireless communication terminals, such as digital cellular does not support, the user still must discard the old unit and 

telephones, and the special functions and features for such 15 purchase a new unit that can support the desired feature. 

devices * SUMMARY OF THE INVENTION 

BACKGROUND inventive concepts alleviate the above noted prob- 

Mobile communication is becoming increasingly popular, l ems m development and distribution of wireless terminal 

particularly for voice-grade telephone services, and more 20 devices with new features. Essentially, the manufacturer will 

recently for data communication services. As a result, there develop and sell a terminal device having predetermined 

is an increasing demand for development of communication communication capabilities and a minimal operation capa- 

terminals with ever more sophisticated features. Even a bility. However, the unit will include a substantial memory 

low-end model of a digital cellular telephone will include for plug-in feature programming. After sale to an end user, 

caller identification capability, a large speed-dial list, called 25 "he end user selects a desired feature or set of features and 

and calling party phone number lists, etc. contacts a service provider. The provider may be the carrier 

At present, manufacturers build the wireless terminal operating the network that the user subscribes to, the manu- 

devices with a complete set of hardware and read-only facturer of the tenmnal umt or m dependent third party, 

software to support a full set of desired features. Develop- „ ™ c ?** obtains software programming from the service 

ment of a new wireless telephone currently takes about 18 P rcmder > which 15 then loaded mt0 the memor y of the 

months, from initial feature specification to first street-sale. terminal device. 



Costs of development of new models of cellular telephones, The downloaded software is essentially a plug-in software 

with ever more sophisticated features are high and continue module, written to the application program interface speci- 

to spiral upward. fication of the core software of the terminal device. When 

At the same time, driven by a long decline in consumer lc > aded into memory, the core software together with the 

electronics prices, the price that the market will bear for such P lu g; m m j odule ™P^f ments the desired feature(s). Features 

telephones has remained steady or even declined, in spite of <*an be added > u P£ raded or re P] a f d virtuall y at an V toe ^ 

the high demand. As a result, the margin on each telephone downloading new feature modules into the memory to add 
or terminal unit made and sold by a manufacturer is 40 to or over-wnte the software for features previously down- 



extremely small, sometimes only a few dollars a unit. The 



loaded into the terminal. 



resellers, typically cellular carriers or their agents, sell the The manufacturer or other parties can upgrade units 

terminal units at a loss, as a form of subsidy or discount, to simply by writing new software. The manufacturer can sell 

encourage customers to subscribe to and use their cellular me unit& for a ^ P rice > which may be small. However, the 

network services. 45 ^ ater sales of the features and/or sales of feature upgrades 

Some capability exists today to program service-related P rovide an additional revenue stream, 
information into digital cellular telephones. However, this From the end users' perspective, they can obtain exactly 
capability has been limited to data needed to provision a new the set of features that they desire. Also, there can be 
unit or to provision an existing unit for a new service. During competition for writing the best software, for at least some 
initial provisioning, for example, the carrier programs in the 50 features. For example, if a third party offers a better voice- 
mobile identification number assigned to the unit, a home recognition dialer module than that available from the 
system identifier, and a preferred roaming list containing the carrier or the manufacturer, the user may opt to buy that 
identifiers of systems providing financially favorable roam- software from the third party. 

ing services. Until recently, such programming involved a The downloading of the software into the wireless termi- 

local physical connection to the unit and required a techni- 55 nal device may utilize a variety of available technologies, 

cian. More and more, the carriers are deploying various For example, a data port on the terminal may be temporarily 

systems to enable at least some of the requisite programming connected to a computer or to a disk or card reader and the 

data to be downloaded to the units via the wireless network. software plug-in modules transferred into memory through 

For example, commonly assigned U.S. Pat. No. 5,613,204 the port. Preferably, the software downloading utilizes an 

to Haberman et al. teaches downloading a fist of system 60 over-the-air transfer. 

identifiers (SIDs) over-the-air into a mobile station. The The minimal capability of the base-line terminal device 

downloaded list is used to control system selection during enables the device to establish a wireless link through the 

roaming. The downloaded information may include infor- carrier's network to a data system. For network-related 

mation about features available through the identified sys- features and/or initial provisioning, this data system would 

terns. U.S. Pat. No. 5,950,130 to Coursey teaches down- 65 be a private system operated by the carrier. The data system 

loading a system access list for roaming control as part of an would send at least one software module containing the 

over-the-air service activation process. executable program necessary to allow the particular type of 
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terminal to implement one or more features selected by the 
individual user. 

In a preferred embodiment, the base-line functionality of 
the terminal implements a wireless web browser. The initial 
data communication would provide web pages for display 5 
on the terminal and allow the user to select packages of 
features and/or individual features from those available from 
the carrier. Upon selection and agreement to payment, a 
server would transmit the module(s) for the selected features 
through the network and over-the-air to the user's wireless 10 
terminal device. The terminal would check the integrity of 
the received module and load the software into flash 
memory. Once loaded, the terminal would execute the 
software, as needed to allow the user access to the selected 
service features. The user could initiate similar procedures to 15 
obtain other feature modules later, from the carrier directly, 
from the manufacturer or from a third party. 

Thus, certain aspects of invention relate to methods for 
distributing and programming one or more wireless com- 
munication terminals. The methodology entails obtaining 20 
one or more programmable wireless communication termi- 
nals. Each terminal has a predetermined minimal set of 
operational capabilities. Each terminal includes a program 
memory for storing one or more feature modules and a 
processor for executing one or more of the feature modules 25 
to control the operational capabilities of the terminal. A 
substantial portion of the program memory is initially blank. 
In the preferred embodiments, the methodology also 
involves establishing a database of plug-in program mod- 
ules. A plug- in program module comprises program code 30 
executable by the processor to enable implementation of a 
predetermined one or more communication features by a 
terminal. 

When a terminal is distributed to a subscriber of commu- 35 
nication services offered by a wireless network, the sub- 
scriber selects one or more features from those available 
through the network. The methodology then involves 
retrieving an executable program module corresponding to 
the selected feature from the database. That module is 40 
downloaded into the program memory in the subscriber's 
wireless communication terminal, to enable that terminal to 
implement the selected feature. 

Other aspects of the invention relate to a network pro- 
viding features based on the inventive downloading of 45 
feature modules and to the system providing the database 
and module transmissions to the handsets. 

A further aspect of the invention relates to a unique 
implementation of the wireless terminal device itself. The 
terminal includes a wireless transceiver for communication 50 
via a public wireless communication system and a program- 
mable controller. The terminal provides a user interface, 
coupled to the programmable controller, to enable a user to 
activate a terminal feature. A memory coupled to the con- 
troller includes two sections. The first section of memory 55 
stores a kernel of software necessary to implement a base- 
line functionality of the terminal device. The functionality 
implemented by the software kernel supports the user inter- 
face and is sufficient to support downloading of software 
into the terminal device. Also, the kernel implements a 60 
software interface. The second section of memory is write- 
able. This section is for receiving and storing at least one 
downloaded feature module program, which is executable 
by the programmable controller through the software inter- 
face. Execution of the module program would serve to 65 
implement one or more terminal features upon activation via 
the user interface. 
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A further aspect of invention relates to the unique soft- 
ware. A software product, in accord with this aspect, 
includes at least one machine readable medium and pro- 
gramming code, carried by the medium. A computer read- 
able medium, as used herein, may be any physical element 
or carrier wave, which can bear instructions or code for 
performing a sequence of steps in a machine readable form. 
Examples of physical forms of such media include floppy 
disks, flexible disks, hard disks, magnetic tape, any other 
magnetic medium, a CD-ROM, any other optical medium, a 
RAM, a ROM, a PROM, an EPROM, a FLASH-EPROM, 
any other memory chip or cartridge, as well as media 
bearing the software in a scannable format. A carrier wave 
medium is any type of signal that may carry digital infor- 
mation representative of the instructions or code for per- 
forming the sequence of steps. Such a carrier wave may be 
received via a wireline or fiber-optic network, via a modem, 
or as a radio-frequency or infrared signal, or any other type 
of signal which a computer or the like may receive and 
decode. 

In the disclosed embodiments, various software products 
reside on disks or in memory of network server computers, 
are transported via one or more data networks, as well as 
through the switching center, trunks and base stations of the 
wireless carrier's network, and over the air link to the 
terminal devices. The software also resides in program 
memory, typically a flash memory, within the terminal 
devices. 

In the case of the software invention, the programming 
code on any such medium comprises a plug-in terminal 
feature module for execution by a controller of a wireless 
communication terminal. The module is compatible with a 
predetermined program interface implemented by the wire- 
less communication terminal, for example, through the core 
kernel of software included at time of manufacture. Execu- 
tion of the module by the controller from a memory in the 
terminal causes the terminal to perform a sequence of steps 
for implementing a predetermined terminal feature through 
a mobile wireless communication network. 

Additional objects, advantages and novel features of the 
invention will be set forth in part in the description which 
follows, and in part will become apparent to those skilled in 
the art upon examination of the following and the accom- 
panying drawings or may be learned by practice of the 
invention. The objects and advantages of the invention may 
be realized and attained by means of the instrumentalities 
and combinations particularly pointed out in the appended 
claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The drawing figures depict the present invention by way 
of example, not by way of limitations. In the figures, like 
reference numerals refer to the same or similar elements. 

FIG. 1 is a process diagram useful in explaining the 
distribution of wireless terminals and associated feature 
programming, in accord with the present invention. 

FIG. 2 is a simplified block diagram of a public wireless 
telephone network useful in explaining operations in accord 
with the invention. 

FIG. 3 is a functional block diagram of an exemplary 
wireless telephone station capable of implementing the 
inventive feature programming. 

FIG. 4 is a front plan view of the exemplary wireless 
telephone station. 

FIG. 5 is a logical block diagram, useful in explaining the 
organization of the software within a terminal device imple- 
menting the present invention. 
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DETAILED DESCRIPTION OF THE however, the data systems of the carrier and/or the manu- 

PRESENTLY PREFERRED EMBODIMENTS facturer transmit the ptug-in(s) through the cellular network 

_ . , ^. ^ , and thus over the air-link to the station 5 (step S4A and/or 

The present invention involves a new business model for gl S4B) 

development and distribution of new features for cellular ^ 0 m initiall resident in me station 5 ^ 

telephones and other types of wireless communication ter- enaWe fc e Nation h & ardware to check the received feature 

mioals. FIG. 1 shows an example of the process flow, for programmmg m0£ni ies to insure that each plug-in was 

distribution of the terminal devices and feature software in completely received and/or to correct any errors in data 

accord with the invention. In the illustrated example, the transmission. When the station has verified that a plug-in 

wireless terminals are digital cellular telephones 5, although was correctly and completely received, it loads the module 

the inventive methodology may apply to other types of into a part of the second memory section M2. Hence, after 

wireless terminal devices. completion of the download procedure (S4A and/or S4B), 

Initially, the manufacturer develops and produces digital the section M2 will contain one or more feature plug-in 

cellular telephone stations 5. Each station includes all hard- modules as shown. The carrier also has provisioned the 

ware necessary to implement standard cellular telecommu* 15 station on the network by this time, therefore the subscriber 

nication functions as well as a wide range of features desired can utilize the station in the normal manner. Of particular 

by users of such stations. Each station 5 includes program note, the station 5 can now perform all operations or steps 

memory, which can be logically considered as two sections in the sequence necessary to implement the particular fea- 

Ml and M2. The first section Ml contains core program- tures selected by the subscriber. Typically, the user views the 

ming software, that is to say the minimum kernel of software 2Q terminal features now available in the terminal on a display 

necessary to implement the base-line functionality of the and selects one of those features through the keypad or other 

wireless station 5. As discussed more later, this software user interface, each time the user desires to activate a 

enables voice and data communication over the wireless particular features of the handset. 

air-link interface. These communications at the base-line The carrier often will obtain the software plug-in modules 

level may point to specific destinations, for example to ^ for various features from the manufacturers) of the stations 

enable provisioning and initial feature selection. The pro- 5. However, the carrier may write its own programming or 

gramming in memory section Ml also implements at least a obtain some plug-ins from other sources. Many of the 

minimal user interface. Preferably, the software implements modules will be specific to one make and/or model of station 

some form of graphical user interface (GUI) designed for available for service through the carrier's network. For a 

wireless terminals, such as a wireless web browser conform- 3Q given feature or package of features, there may be as many 

ing to the wireless application protocol (WAP). different versions of the program module as there are dif- 

The second section of memory M2 is designed for storage ferent versions (make and/or model) of stations. However, if 

of plug-in feature programs or modules. However, when written to a standard program interface, some modules may 

initially manufactured, the memory section M2 is blank. The run equally well in two or more types of station, 

manufacturer sells the stations 5, with the blank memory 35 The inventive concepts also encompass downloading fea- 

section M2 to the carrier (at SI), and the carrier sells or hire software for the station 5 from third party sources. For 

otherwise distributes the terminals to its subscribers (at S2). example, the manufacturer may offer a voice processing 

When a subscriber first receives the cellular telephone 5, the plug-in module for voice activated automatic dialing from 

section M2 of the memory for the plug-in feature modules the station 5. A third party, however, may offer a competing 

is still blank. The core programming in memory section Ml, 40 plug- in product. The competing product may be better or 

however, enables the subscriber to make at least some cheaper or more desirable for some other reason, 

communications using the station 5. Alternatively, the third party may offer a feature for the 

Typically, the subscriber with the new station has an station that neither the carrier nor the manufacturer offers. In 

opportunity to review information about features available any such case, the subscriber can initiate a communication 

for implementation through the new station or terminal 45 10 a data system or server 37 operated by the third party 

device. The carrier or other provider may use any convenient programmer and indicate a desire to select a feature from 

means to distribute this information, such as conventional that provider (S5). The server 37 transmits the plug-in for the 

advertising media, print or electronic information products selected feature to the station 5 (step S6), preferably through 

distributed in the packaging with the new station, or even the cellular network and thus over the air-link. After recep- 

verbal description from an operator during a telephone 50 tion and error checking, the plug- in is loaded, and the 

conversation. In a preferred embodiment, the subscriber subscriber can utilize the new feature in the same manner as 

receives the information via the terminal 5, for example as for the feature software downloaded from the carrier or the 

one or more web page displays. manufacturer. 

In a preferred embodiment, the subscriber with the new As shown by the loop at S7, the various process steps of 

cellular station 5 would use the station to contact the carrier 55 selecting features and downloading plug-in modules may be 

and or certain data systems operated by the carrier to obtain repeated any number of times. The subscriber may elect to 

feature software. This is analogous to an initial communi- repeat the process with any of the three providers, for 

cation utilized to provision the station 5 on the carrier's example to obtain software upgrades for selected features, to 

network and typically would coincide with the provisioning select and obtain software for new features, etc. The down- 

process. In step"S3A the subscriber communicates feature 60 load technique also is useful for debugging purposes . If a 

selections to the carrier. At some point, the subscriber may user has a p roblem with a feature thf..iisp.r ran initiate 

communicate certain feature selections to the manufacturer communications with, a server of the, particular software 

(S3B). Data systems of the carrier and/or the manufacturer provider, and if neces sai^btaiiuLdo wnload of a new cop y 

will transmit one or more plug-in software modules to the of the relevant module or obtain a download of a software 

station 5. The subscriber could receive a hard media of some 65 patch forj£ e^existjngjaiQduk. 

type, such as a disk or card, and use some direct coupling to The storage of plug-in feature modules in the stations 5 is 

transfer the plug-ins to the station. In the illustrated example, relatively permanent. Once successfully loaded into the 



05/13/2004, EAST Version: 1.4.1 



US 6,6: 

7 

section M2 of the memory, a module may remain there 
unchanged for the useful life of the terminal device 5. Most 
often, the methodology entails replacing a module previ- 
ously stored in the terminal memory only when the sub- 
scriber desires to purchase a new module, either as a feature 
upgrade or to replace an old feature with a new feature. 
Consequently, the feature downloads tend to occur when the 
subscriber first purchases a new terrninal device and infre- 
quently thereafter. 

Aspects of the invention relate to the methodology for 
distributing the terminal stations and software, to the sta- 
tions themselves, to the software, as well as to the networks 
and systems involved. To insure a complete understanding 
of these various inventive concepts, it may be helpful to 
discuss examples of these various elements in somewhat 
more detail. Consider first a network implementing the 
feature programming in accord with the invention and 
providing a variety of services using stations programmed in 
accord with the invention. 

FIG. 2 depicts a system for providing voice telephone 
communications as well as data communication services. 
Although the invention may apply to other types of wireless 
networks, as shown, a wireless telephone network 3 pro- 
vides cellular or personal communications service (PCS) 
type services to mobile stations depicted by way of example 
as mobile handsets 5. The network 3 enables users of the 
mobile stations 5 to initiate and receive telephone calls to 
each other as well as through the public switched telephone 
network (PSTN) 7 to landline telephones 9. 

The network 3 includes a number of mobile switching 
centers (MSCs) 11, one of which appears in the drawing for 
simplicity of illustration. Each MSC 11 connects through 
trunk circuits to a number of base stations (BSs) 13, which 
the MSC controls. Through the MSC 11 and the base stations 
13, the network 3 provides voice-grade digital telephone 
services over the common air interface to and from the 
mobile stations 5. The network elements also may provide 
data services over the logical communication channels, as 
discussed more later. 

The mobile stations 5, the MSCs 11 and the base stations 
13 implement one or more standard air-link interfaces. For 
example, the wireless telephone network 3 may support 
dual-mode services. Although not shown separately, such a 
dual-mode network includes wireless telephone components 
that output analog telephone signals for transmission accord- 
ing to an analog wireless protocol (e.g., AMPS) as well as 
digital wireless system components that operate in accord 
with a digital wireless protocol. Digital wireless equipment 
is available today to support any one of several common 
interface standards, including time division multiple access 
(TDMA) and the Global System for Mobile communications 
(GSM). In the preferred embodiment, the digital wireless 
telephone components support the code division multiple 
access (CDMA) standards, for example the CDMA protocol 
IS-95. The base stations may provide both types of services. 
Alternatively, the network may comprise base stations that 
send and receive voice and signaling traffic according to the 
prescribed analog protocol as well as digital base stations 
that utilize the digital wireless protocol. Each dual -mode 
MSC typically includes a switching subsystem for analog 
telephone services, a switching subsystem for digital tele- 
phone services, and a control subsystem. Other MSCs may 
implement only one type of service. 

As noted, the preferred digital equipment provides 
CDMA service. With CDMA, each transmitted signal com- 
prises a different pseudorandom binary sequence, also 
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referred to as a pseudonoise (PN) sequence, which modu- 
lates a carrier signal, spreading the spectrum of the wave- 
form. Thus, since each CDMA subscriber unit is assigned a 
unique PN code, a plurality of subscriber stations can send 

5 and receive CDMA signals sharing the same frequency 
spectrum. If these CDMA signals were viewed in either the 
frequency or time domain, the multiple access signals would 
appear to be superimposed on top of each other. The CDMA 
signals are separated in the receivers of the base stations or 

10 the subscriber stations by using a correlator which accepts 
only signal energy from the selected binary PN sequence and 
desp reads its spectrum. The CDMA signals from other 
sources, whose codes do not match the selected binary PN 
sequence, are not despread in bandwidth and as a result, 

15 contribute only to the background noise and represent a 
self-interference generated by the system. 

As will be familiar to those of ordinary skill, an air-link 
interface for each cellular service in a geographic area 
includes paging channels and/or signaling channels, as well 

20 as actual communications channels for voice and/or data 
services. The channels may be separate frequency channels, 
or the channels may be logically separated, for example 
based on time division or code division. The paging and 
signaling channels are used for preliminary coded commu- 

25 nications between a cellular telephone and a cell site in 
setting up a telephone call or other session, after which a 
communication channel is assigned or set up for the tele- 
phone's use on that call. 

The wireless network 3 includes a home location register 

30 (HLR) 15 that stores subscriber profiles for each of the 
wireless subscribers and their associated digital wireless 
telephones 5. The HLR 15 may reside in the home MSC 11 
or in a centralized service control point that communicates 
with the MSC(s) via an out-of-band signaling system such as 

35 an SS7 network. As recognized in the art, the HLR 15 stores 
for each mobile subscriber the subscriber's mobile telephone 
number, the mobile identification number, and information 
specifying the wireless services subscribed to by the mobile 
subscriber, such as numeric paging or text -based paging, 

40 data communication services, etc. 

The carrier also operates a number of different systems in 
one or more customer service centers 17. These systems 
include one or more billing systems, network provisioning 

45 systems such as the Mobile Telephone Administration Sys- 
tem or "MTAS", client account administration systems, and 
the like. The billing system, for example, receives usage and 
operations data from the MSCs 11 and processes that data to 
generate bills for individual subscriber and to forward data 

50 regarding users roaming through the carrier's service area 
through a clearinghouse (not shown) for reconciliation. The 
MTAS provides data to the HLR 15 and/or to the MSCs 11 
to provision services for new stations 15 and modifies 
provisioning data as customers change their subscriptions to 

55 obtain different sets of services from the carrier. 

In the more advanced implementations of cellular 
networks, such as the network 3, the carrier provides data 
communication services in addition to voice -grade tele- 
phone services. For example, the network 3 may include 

60 interworking function (IWF) equipment 19. This equipment 
provides a multi-call interface to communication links from 
the MSC 11 and typically implements a firewall finction. In 
this manner, the IWF equipment essentially looks like a 
dial-up interface to a data network such the public packet- 

65 switched network now commonly known as the Internet 21. 
The user essentially makes a data call from the handset 5 
to the IWF equipment 19. The equipment 19 answers the call 
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and executes a handshake and log-in routine to validate the 
handset 5 and in some cases to validate the individual user. 
The IWF equipment 19 temporarily assigns an Internet 
Protocol (IP) address to the handset for the duration of the 
data communication. The equipment then provides a two- 5 
way data interface, with appropriate protocol conversions, 
enabling data access to the Internet 21. If desired, the IWF 
equipment may also initiate dial-out type procedures to push 
data communications from the Internet 21 through the 
network 3 to the particular handset 5. 10 

The Internet access service enables users to access any 
equipment coupled to the Internet 21, virtually anywhere in 
the world. As discussed more later, one consequence is that 
a user of the station 5 can access a server 37 of an 
independent supplier of feature programming for the handset 15 
5, such as the manufacturer or a third party. 

As part of the provisioning of a new digital cellular 
telephone station 5, it is necessary to download certain data 
into the new station 5. To automate this procedure, the 
carrier operates an over-the-air (OTA) provisioning server 20 
25. A provisioning database 27 stores data sets necessary to 
provision stations for the various services offered through 
the network 3 as well as a data table of all stations 5 served 
through the network 3 and the services currently provided to 
each station. When the new station first comes on-line, the 25 
customer service center 17 will establish a record for that 
station 5 in the provisioning database 27. 

The provisioning database 27 is accessible by the OTA 
application server 25. The database 27 may be a program run 3Q 
on the sever computer or it may reside in a separate 
computer in communication with the server 25. 

In a similar manner, the OTA application server 25 has 
access to a feature services database 29, running on . the 
computer 25 or in a separate computer. The feature services 35 
database 29 stores the plug-in modules for all features 
available to the stations 5 through the carrier network 3, in 
versions written for each manufacture's type of wireless 
station 5. For the feature selection process, the carrier may 
also provide a web server 31 to supply web pages and 40 
receive selection inputs, to allow the users to select feature 
sets or ala carte feature offerings on-line. 

Interworking function (IWF) equipment 33 provides a 
data interface similar to that provided by the equipment 19. 
The IWF equipment 33, however, provides an interface to a 45 
private data network operated by the carrier, shown as an IP 
network 35, The IWF equipment 33 and the IP network 35 
provide data communications to the OTA application server 
25 and the web page server 31. 

The hardware of a server system, such as the server 25 or 50 
the server 31, corresponds to that of a typical general- 
purpose computer, comprising a central processing unit 
(CPU) formed of one or more microprocessors, a number of 
memory devices and an interface to the data communication 
network, in this case to the IP network 35. Such a computer 55 
may also provide a graphical user interface (GUI) for local 
operation and control, for example comprising a common 
type of display, a keyboard and one or more of the common 
types of cursor controls. Various media, readable by such a 
system, may store or cany the executable code and any 60 
associated data, for the web pages provided by the server 31 
or for the provisioning data and feature module downloading 
performed by the OTA application server 25. Examples of 
such media include semiconductor and disk type memories, 
digital tapes, and the like. Computer readable media used by 65 
such systems also include various types of signals sent and 
received by computer systems for loading software code and 
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associated data into the memory and/or the CPU of the 
system hardware and sending and receiving web pages 
and/or plug-in modules via the IP network 35, the MSC 11, 
the base station 13 and the air-link. 

When the user first obtains a new station 5, the user 
operates the cellular telephone to call the customer service 
center 17 to initiate provisioning. The MTAS system pro- 
vides provisioning data to the network elements. The cus- 
tomer service systems 17 also set-up an entry for the station 
5 in the database 27. Once the account is set up, the user 
initiates a data communication with the OTA application 
server 25, and the server downloads data such as the mobile 
identification number to provision service in the handset 5, 
itself. A more detailed description of the over-the-air pro- 
visioning operations appears in commonly assigned U.S. 
patent application Ser. No. 09/123,454, filed on Jul. 28, 
1998, by Hsu et al., entitled DIGITAL WIRELESS TELE- 
PHONE SYSTEM FOR DOWNLOADING SOFTWARE 
TO A DIGITAL TELEPHONE USING WIRELESS DATA 
LINK PROTOCOL. 

As part of the data communication session with the OTA 
application server 25, the station 5 may also communicate 
with the web page feature selection server 31. Alternatively, 
the user may initiate a later, session with the servers 25 and 
31. In any of these sessions, the user reviews lists and/or 
descriptions of features available via the network 3. 
Preferably, the user activates the web browser software of 
the station 5 to review feature pages from the server and 
input selections via the station 5. Through this procedure the 
user selects the set of features that the user desires for the 
new station 5. 

The carrier will typically offer packages of features, often 
corresponding to packages of services offered to subscribers 
using the cellular network 3. The packages may correspond 
to different levels or grades of cellular telephones, as com- 
monly sold today. A high-end package may include virtually 
every feature available for the particular manufacturer's 
handset 5. A mid-range package of features would include 
the most desirable features and would support the most 
common services on the network. A low-end package would 
provide only minimal features. The carrier also may offer 
any or all of the features on an ala-carte basis. 

When the subscriber has selected a desired feature or 
package of features, the selection information is forwarded 
to the OTA application server 25. The server updates the 
customer's record in the feature database 29 to show the 
selection and notifies the customer service systems 17 of the 
purchase of the selected feature(s). The OTA application 
server 25 obtains one or more plug-in program modules 
from the feature program database 29. These modules con- 
tain the executable software code needed to enable the 
particular brand of digital station 5 to provide the selected 
feature or features. The OTA application server 25 then 
transmits the plug-in modules through the IP network 35 to 
the IWF equipment 33. The IWF equipment converts the 
packets containing the program code from the form used on 
the IP network 35 to a format compatible with transmission 
through the MSC 11 and the base station 131 and over the 
air-link to the wireless terminal device 5. 

The station 5 receives the packets containing the execut- 
able software for the feature plug-in modules over the 
air-link. The station extracts the software from the packets 
and compiles the complete set of transmitted code. The 
station 5 verifies that each received plug-in module was 
correctly and completely received, and if so, the station 5 
loads the module into an appropriate location in its memory. 
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Since the carrier has provisioned the station 5 to operate on 
the network 3, the subscriber can now utilize the station 5 in 
the normal manner and to take advantage of the selected one 
or more handset features. 

The OTA application server 25 will recognize a successful 5 
completion of a module download operation, for example, 
upon receipt of a confirmation message from the user's 
handset 5. The server 25 may make an appropriate notation 
in the user's record in the feature services database 29 and 
will notify the billing application of the customer services 10 
systems 17, to enable reporting and billing if appropriate on 
the user's next account statement. In some cases, the carrier 
may charge for each feature module obtained by the user. In 
other cases, the carrier may elect not to charge the user for 
the software module but to cover the expense instead 15 
through the monthly charges for a related network service. 

If a purchased feature requires network provisioning, for 
example, to cause the network 3 to send caller identification 
data with incoming calls to the handsets, the MTAS appli- 
cation may be instructed to update the customer's network 20 
provisioning data in the HLR 15 and/or the home MSC 11. 
The billing system would then include monthly subscription 
charges for caller ID services in subsequent bills to the user. 

At a later time, the user may initiate a similar procedure 
to obtain plug-in feature modules to upgrade or replace 25 
earlier selections or to add new features to the handset 5. For 
this purpose, the user may contact the carrier's systems 25 
and 31, as discussed above. Alternatively, the user may 
initiate a data session through the IWF equipment 19 and the 
Internet 21. In such a session, the user can select features and 
obtain feature modules from any appropriate source or 
server available on the Internet. These sources may include 
data systems of the manufacturer (not separately shown) or 
independent third party program sources, such as the server 
37. 35 

It may also be helpful to consider the structure and 
functionality of a wireless terminal station 5, constructed for 
operation in accord with the present invention. 

FIG. 3 is a functional block diagram, and FIG. 4 is in a 40 
plan view, illustrating a digital telephone station 5, which 
may be used in an implementation of one or more embodi- 
ments of the present invention. Although the station may be 
incorporated into a vehicle mounted mobile unit or into 
another device, such as a portable personal computer, for 45 
discussion purposes the illustrations show the station in the 
form of a handset. 

The handset 5 functions as a normal digital wireless 
telephone station. For that function, the station 5 includes a 
microphone 41 for audio signal input and a speaker 43 for 50 
audio signal output. The microphone 41 and speaker 43 
connect to voice coding and decoding circuitry (vocoder) 
45. For a voice telephone call, for example, the vocoder 45 
provides two-way conversion between analog audio signals 
representing speech or other audio and digital samples at a 5s 
compressed bit rate compatible with the digital protocol of 
the wireless telephone network communications. 

For digital wireless communications, the handset 5 also 
includes a digital transceiver (XCVR) 57. The invention 
encompasses embodiments utilizing any type of digital 60 
transceivers that conforms to current or future developed 
digital wireless communication standards. For example, the 
transceiver 57 could be a TDMA or GSM unit, designed for 
cellular or PCS operation. In the preferred embodiments, the 
digital transceiver 57 is a CDMA transceiver. The trans- 65 
ceiver 57 provides two-way wireless communication of 
information, such as vocoded speech samples and digital 
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message information. The transceiver 57 connects through 
RF send and receive amplifiers (not separately shown) to an 
antenna 59. 

The mobile telephone 5, upon initializing for operation in 
a CDMA system, acquires the pilot channel of the base 
station 13, obtains system configuration and timing infor- 
mation for the CDMA system, and begins monitoring the 
CDMA paging channels. In particular, the mobile station 5 
may perform paging channel monitoring procedures while in 
an idle state. The mobile station 5 may operate in a slotted 
mode, where only selected slots (e.g., one or two slots per 
slot cycle) are monitored on the paging channel. 
.Alternatively, the mobile station 5 may monitor all paging 
and control channels if operating in a non-slotted mode. In 
either case, the mobile station 5 monitors the paging and 
control channels for a command, and transmits an acknowl- 
edgement upon receiving any message that is addressed to 
the mobile station 5. 

The digital wireless telephone network 3 may also be 
implemented as a TDMA (time-division multiple access) 
system. TDMA systems may be implemented using either 
the Pan-European digital mobile radio system GSM, DSC 
1800, PCN (personal communication network), or the North 
American TDMA (NA-TDMA) digital cellular system 
known as IS-54. In the case of NA-TDMA, commands can 
be transmitted on a slot associated control channel 
(SACCH), which includes twelve code bits present in every 
time slot transmitted over the traffic channel whether these 
contain voice or the 260-bit fast associated control channel 
(FACCH) information. 

The station 5 may be a dual or tri-mode telephone, in 
which case the station 5 would include one or more addi- 
tional transceivers (represented by the dotted line associated 
with the transceiver 57) conforming to an alternate standard. 
Initially, the additional transceiver would likely consist of an 
analog transceiver conforming to the AMPS standard. 
However, it is within the scope of the invention to include 
an additional digital transceiver, as well. For purposes of 
further discussion, however, we will assume presence of a 
single digital transceiver 57, preferably in the form of a 
CDMA transceiver. 

As shown, the digital telephone handset 5 also includes a 
display 49 for displaying messages, pages generated by a 
client browser program, call related information, dialed and 
calling party numbers, etc. A keypad 47 enables dialing 
digits for voice and/or data calls and generating selection 
inputs keyed by the user based on displayed information, 

A microprocessor 51 controls all operations of the handset 
5. The microprocessor 51 is a programmable device. The 
mobile unit 5 also includes a flash memory 53 for storing 
various software routines and mobile configuration settings, 
such as the mobile identification number (MIN), etc. The 
flash memory 53 has sufficient space to store the core 
programming of the handset 5 as well as a number of the 
plug- in feature modules. An example of the logical software 
contents of the flash memory is discussed later with regard 
to FIG. 5. 

Flash memory is a form of non-volatile memory that 
stores data or executable code, which can be written over in 
a random access fashion but only under certain controlled 
circumstances. Typically, a special bit-pattern or code is 
required to write bits to specific locations in the flash 
memory. Different areas or sectors of the flash memory are 
accessible with different codes to provide different levels of 
write protection. The use of these different bit patterns to 
control the write operation to the sectors of the flash memory 
effectively limits who may access the various sectors. 
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For example, one area of the flash memory 53 stores the 3 shows three of the function keys for input of information 
core programming of the handset 5, that is to say the to and retrieval of information from the processor and 
operating system, the browser, etc, that provides the mini- memory of the handset and/or selection of features from a 
mum functionality of the terminal. This area may be write- displayed menu or web page. One of these keys is the cursor 
protected with a code known only to the manufacturer. The 5 key 73. This key at least controls up and down movement of 
microprocessor 51 stores downloaded plug-in modules for a displayed cursor or highlight function and attendant scroll - 
the selected features in an area of the memory 53 that has ing of menus or pages shown on the display 49. In the 
one or more lower levels of protection. For example, the illustrated embodiment, the key 73 also provides a left or 
carrier may have the code to allow access to certain areas right input for side-to-side cursor control. The exemplary 
designated for storage of feature programming required by 10 keys also include the selection (SEL) key 71, which enables 
that carrier's network, whereas the microprocessor 51 of the a user to select an option indicated by the cursor or high- 
handset itself may have the code to allow all other parties to lighting. The clear (CLR) key 75 enables the user to erase a 
write modules for less critical features into the remaining selection, A wide variety of other cursor controls and selec- 
space in the memory 53. tion inputs could be used. 

Initially, program modules for newly selected features or 15 The keypad 47 supplies user input information to the 

feature packages are loaded to otherwise blank areas of the microprocessor 51, and the microprocessor provides digital 

memory 53. However, over time, the memory 53 may data signals to cause the display 49 to show appropriate 

become full. Further addition of new modules, to support information to the user. Under control of the microprocessor 

new features or enable feature updates, then requires that 51, the display 49 shows textual information, such as dialed 

new modules are written into memory 53 over older mod- 20 numbers and name and number information regarding stored 

ules. In some cases, old modules may need to be deleted speed dialing lists. The display 49 also may have certain 

before new modules can be installed. The handset 5 may specialized indicators, such as a message- waiting indicator 

include an expansion slot 62, to allow the user to purchase and various roaming or home service indicators, 

and install additional memory to allow installation of an Hence control of me m i cropr ocessor 51 and its 

even larger number of feature modules. 25 programmmg> the keypad 47 and the display 49 provide a 

The handset 5 fturther includes a non-volatile random graphical user interface allowing the customer to input 
access memory (RAM) 55. The RAM 55 stores operating information and receive information. The preferred user 
data, such as telephone numbers and other data input by the interface includes a wireless application protocol (WAP) 
user via the keypad 37. The RAM 55 also may store received type web browser. In accord with the invention, part of this 
software, during reception and checking for errors and/or 30 user interface relates to the feature selection and program- 
completeness, until the software is ready for loading into the ming service. 

sectors of the flash memory. To make a romine te l ep hone call, a user dials in the 
The handset 5 also includes one or more I/O ports 61 destination number by actuating the appropriate ones of the 
coupled to the microprocessor 51. The port 61 may enable ^ number keys 67 and then pushes the send (SND) key 77. The 
a user to connect a laptop computer or other data device to microprocessor 51 generates a call request message in the 
the terminal 5, via wire or a short-distance wireless link, for appropriate protocol. This message includes the dialed des- 
example to enable wireless data communication for the tination number. The microprocessor causes the digital 
laptop using the handset 5 over the network 3. For purposes transceiver 57 to send the message, as a signaling message, 
of feature programming, this port 61 also allows input of f or example over the signaling channel of the particular 
modules of executable code for selected features. For wireless air-interface to a base station, for call set-up pro- 
example, the user may receive a floppy disk or CD with cessing by the network 3. 

selected modules and load the modules from a computer ^ a feahue Q ^ tfae microprocessor 51 

through the port 61. As discussed more later, however, the ^ cawt tfae scfeen 49 to disl a of information 

preferred [embodiment utilizes over-the-air programming to ^ abom one of mQre availabk features ^ ^ wouM actuate 

download the plug-in feature modules. ihc key n to move ^ mjSfX {Q a link to aQ0ther page or to 

FIG. 4 shows the front of the cellular mobile station 5, in se l ec t a feature listed on the displayed page. When indicated 

the form of a portable handset. As shown, the handset by the cursor, the user would actuate the select (SEL) button 

housing includes openings 63 enabling sound to emerge y\ to effectively 'click-on' the item and/or actuate the SND 

from the speaker 43, as well as openings 65 to allow input 5Q key 77> to initiate transmission. In response, the wireless 

of sound to the microphone 41. terminal 5 would transmit a URL or other data correspond- 

The handset 5 includes the visible display screen 49. The ing to the selected item over the air-link and through the 

handset 5 also includes various keys making up the keypad network 3, for example to the server 31. The transmission 

47. The keypad 47 typically includes at least two sets of keys may utilize a channel previously allocated to a session 

67, 69. The keys 67 represent dialing-input keys. Typically, 55 between the handset 5 and the IWF equipment, or the key 

each of the twelve keys is imprinted with a number from 1 actuation may trigger set-up of a new link through the 

to 0, an asterisk or star (*), and a number sign (#). Each of network 3 for the message transmission, 

the keys 2 through 9 is imprinted with three or four letters, of m}asCf mc ^ interface provided through the display 

to enable input of alphabetical information. 49 md me keypad 47 also allows the user to select and 

The keys 69 are function keys. Exemplary function keys 60 operate the various terminal features provided by the down- 
include a cursor control or scrolling key 73, a selection loaded plug-in modules. For example, the user may select 
(SEL) key 71, a clear (CLR) entry key 75, a send (SND) key the speed dial list and then activate the key 73 to scroll 
77 and an END key 79. The send (SND) key 77 is used to through the list as shown 00 the display 49. Upon viewing 
initiate or answer a wireless call, and the "END" key 79 is a desired item in the list, the user may activate keys to edit 
used to terminate a wireless call. 65 the name or number shown under the listed item or push the 

Although other keys with other functions and/or labels send (SND) key 79 to activate the station 5 to call the listed 

may be used in place of or in addition to those shown, FIG. party. The microphone and speaker may also serve as 



05/13/2004, EAST Version: 1.4.1 



US 6,622, 

15 

elements of the user interface, for example, if a feature or 
selection entails announcements and/or speech-recognition 
of inputs from the user. Such an interface strategy allows use 
of a speech recognition based speed dialing feature, to 
automatically initiate hands-free calls. 5 

FIG. 5 is a logical block diagram helpful in explaining the 
architecture of the software system 100 used in the wireless 
terminal device 5, in accord with the invention. In a typical 
implementation, the random access type flash memory 53 
initially stores core programming and receives and stores 10 
one or more downloaded feature modules for implementing 
selected handset features. 

The core programming or kernel includes an operating 
system 101 along with various drivers and application 
programs. On top of the operating system, the microproces- 15 
sor 51 runs a number of software routines or applications 
from the memory 53. The first of these applications is a web 
browser program 103 designed for wireless terminals, some- 
times called a thin client browser. The browser enables data 
communications over the network 3 and an IP network such 20 
as the network 35 or the Internet 21. The software imple- 
ments a graphical user interface (GUI) 105, including a user 
interface for communications through the wireless network 
3 and the packet data networks 21 and 35. For many 
services, this enables display of received pages and selection 25 
of links from the pages, for example to review available 
features and select desired features. 

The stored programming in memory 53 also includes I/O 
device driver software 111 for the physical elements of the 3Q 
terminal 5 that provide the user interface, such as the display 
49 and the keypad 47. The driver programming also includes 
a device driver for the I/O port 61. The stored programming 
also includes vocoder software 103 and call processing 
software conforming to the particular air-link protocol 109 35 
of the network 3, for example conforming to the current 
CDMA standard. 

For purposes of the feature programming, the core soft- 
ware may implement one or more application programming 
interfaces (APIs) 113, which provide a logical interface 40 
between the plug-in feature modules and the core program- 
ming. The core software stored in the flash memory 53 also 
includes an application 115 for implementing the download 
of the plug-in modules, error correction, checking for 
completion and loading thereof into the flash memory 53 for 45 
subsequent execution. 

The software system 100 also includes a variety of the 
feature modules, several of which are shown as examples in 
FIG. 5. Feature modules typically are written to the speci- 
fications of the hardware and the API of the particular type 50 
of handset 5. The station 5 may receive, store and execute 
modules 121 or 123, that correspond to different sets or 
packages of features. Alternatively, the station 5 may 
receive, store and execute modules 125 for individual fea- 
tures. In many cases, the memory 53 of the station 5 will 55 
contain a plug-in module 121 or 123 for one package of 
features provided by the carrier, plus one or more individual 
feature modules 125 obtained from any of the available 
sources. The microprocessor 51 executes the feature module 
programming through the operating system 101 and the API go 
113. 

Aspects of the invention relate to the software elements, 
such as those shown in FIG. 5. At different times all or 
portions of the executable code for any or all of these 
elements may reside in physical media or be carried by 65 
electromagnetic media. Physical media include the memory 
53 of the stations 5, various semiconductor memories, tape 
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drives, disc drives and the like of personal computers, 
workstations, host computers or network servers. All or 
portions of the software, particularly the plug-in modules 
may at times be communicated through various networks. 
Thus, another type of media that may bear the software 
includes optical, electrical and electromagnetic waves, such 
as used across physical interfaces between local devices, 
through landline networks and over various air-links. 

While the foregoing has described what are considered to 
be best mode and/or other preferred embodiments of the 
invention it is understood that various modifications may be 
made therein and that the invention may be implemented in 
various forms and embodiments, and that it may be applied 
in numerous applications, only some of which have been 
described herein. It is intended by the following claims to 
claim any and all such modifications and variations which 
fall within the true scope of the invention. 

What is claimed is: 

1. A method, comprising: 

obtaining programmable wireless communication termi- 
nals each having a predetermined minimal set of opera- 
tional capabilities, a program memory for storing one 
or more feature modules and a processor for executing 
one or more of the feature modules to control the 
operational capabilities, wherein a substantial portion 
of the program memory is initially blank; 

establishing a database comprising a plurality of separate 
plug-in program modules, each plug-in program mod- 
ule comprising program code executable by the pro- 
cessor to enable implementation of a predetermined 
one or more communication features; 

distributing one of the programmable wireless communi- 
cation terminals to a subscriber of a communication 
service offered by a wireless communication network; 

receiving from the subscriber a selection of a feature from 
among a plurality of available features; 

retrieving one of the executable program modules from 
the database, the retrieved module corresponding to the 
selected feature; 

downloading the retrieved module into the substantial 
portion of the program memory in the one program- 
mable wireless communication terminal, to enable the 
one wireless communication terminal to implement the 
selected feature; and 

automatically provisioning at least one element of the 
wireless communication network to activate a subscrip- 
tion service corresponding to the selected feature. 

2. A method as claim 1, further comprising transmitting 
information relating to the available features over the air- 
link to the one programmable wireless communication ter- 
minal for presentation to the subscriber, to facilitate feature 
selection by the subscriber. 

3. A method as in claim 1, further comprising: 
receiving from the subscriber a selection of a second one 

of the available features 

retrieving second one of the executable program modules 
from the database, the second retrieved module corre- 
sponding to the second selected feature; and 

downloading the second retrieved module into the sub- 
stantial portion of the program memory in the one 
programmable wireless communication terminal, to 
enable the one wireless communication terminal to 
implement the second selected feature. 

4. A method as claim 3, further comprising automatically 
provisioning at least one element of the wireless communi- 
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cation network to activate a subscription service correspond- 
ing to the second selected feature. 

5. A mobile wireless communication network for provid- 
ing communication services for subscribers using wireless 
terminal devices, comprising: S 
a plurality of base stations implementing wireless com- 
munications with the wireless terminal devices over a 
standard air interface; 
a mobile switching center coupled to the base stations; 
a controller for controlling services provided through the 
wireless communication network to the wireless termi- 
nal devices; 

an over-the-air software download server coupled for 
communication with the wireless terminal devices 1S 
through the mobile switching center and one or more of 
the base stations; 

a database comprising a plurality of separate plug-in 
program modules coupled to selectively supply the 
modules to the download server, each of the plug-in 20 
program modules comprising program code executable 
by a processor of a wireless terminal device to enable 
implementation of a predetermined one or more termi- 
nal features; and 

a provisioning system in communication with the con- 25 
troller for supplying provisioning data to the controller 
for activation of services in the wireless communica- 
tion network, wherein: 

upon identification of a feature selected by one 
subscriber, the download server receives a program 



module corresponding to the selected feature from 
the database and transmits the received program 
module through the mobile switching center and one 
of the base stations and over the standard air inter- 
face to one wireless terminal device associated with 
the one subscriber for storage therein, to enable 
implementation of the selected feature by the asso- 
ciated wireless terminal device, and 
upon transmission of the received program module to 
the one wireless terminal device, the download 
server causes the provisioning system to supply 
provisioning data to the controller for activation of a 
service associated with the selected feature in the 
wireless communication network with respect to the 
one wireless terminal device. 

6. A mobile wireless communication network as in claim 
5, wherein the standard air interface implemented through 
the base stations supports digital voice and data communi- 
cation services. 

7. A mobile wireless communication network as in claim 
5, further comprising a server coupled for data communi- 
cation through the mobile switching center, for transmitting 
information describing available features to the wireless 
terminal devices for presentation to subscribers, to facilitate 
feature selections. 

8. A mobile wireless communication network as in claim 
7, wherein the information comprises one or more web 
pages describing the available features. 
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